En bref
- CVE-2007-5201 est une vulnérabilité MOYENNE (CVSS 4.6) touchant duplicity, duplicity (duplicity project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.37%, plus élevée que 31.6% des vulnérabilités.
- Correctif : mettre à jour vers 0.4.9 ou plus récent.
Description
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.
NVD description
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free